Privacy Policy

• Account info: business name, email, and password (stored as a one-way hash, never in plain text)
• Business details you add: hours, branding, tax rates, invoice settings
• Billing info, handled directly by our billing processor, not stored on our servers
• Credentials for any integration you connect (like a Stripe key or a Slack webhook link), stored encrypted
• Basic usage data: when you log in, and general error logs, to keep the service working

Client names, contact info, appointment history, invoices, and notes you add are stored so Hatsa CRM can run your business for you. This information is yours. We don't sell it, and we don't use it to contact your clients ourselves or to market to them on our own behalf.

If you use a Hatsa CRM feature that sends your client's information to a connected third-party tool (for example, adding a client to a Mailchimp audience, or sending a Slack message when they book), that only happens for a tool you've chosen to connect, and only with the information that feature needs.

Hatsa CRM uses your browser's local storage to keep you logged in and to remember a few interface preferences. We don't use advertising trackers or sell browsing data to anyone.

• Our billing processor, to handle your subscription payment
• A payment processor you connect yourself (currently Stripe), if you turn on card payments, for the card payments you choose to take
• An email delivery service, to send invoices, notifications, and account emails
• Any integration you personally connect (Zapier, Slack, Mailchimp, Apple Calendar), only with the data that integration needs to do its job
• Law enforcement or regulators, only if we're legally required to

We don't sell your data or your clients' data to anyone, for any reason.

Passwords are hashed, not stored in plain text. Sensitive integration credentials (API keys, webhook URLs) are encrypted at rest. Each business's data is kept separate from every other business on Hatsa CRM. No system is perfectly secure, but we take reasonable, ongoing steps to protect what's stored here.

We keep your account and business data for as long as your account is active, so your invoice and client history stays intact. If you close your account, we'll delete your data within a reasonable period, except where we're required to keep financial records longer by law.

You can view, correct, export, or delete most of your data directly in Hatsa CRM. To close your account and request full deletion, contact us using the email below.

Hatsa CRM is a business tool and isn't directed at, or knowingly used to collect information from, children under 13.

If we make a material change to how we handle information, we'll let you know by email or an in-app notice before it takes effect.

Questions about this policy, or a request to access or delete your data? Reach us at support@mellax.com.